home

2f925a9155154d319f64e2bf3569c93c_pod14_he-il.exe

DR Download Manager

Digital River, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from www7.buyoffice.microsoft.com and multiple other hosts.
Publisher:
Solid State Networks  (signed by Digital River, Inc.)

Product:
DR Download Manager

Version:
3.2.3.4

MD5:
74020d664becbb6ce8ef7a261129d4bf

SHA-1:
8952bb9aa8a7f7d6cae395136f4fb8c0235371c5

SHA-256:
f591f4c12002005e1df1b8cc7101df014130b791f6dc73515b46a33889bcce2d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:18:47 PM UTC  (today)

File size:
2.5 MB (2,572,752 bytes)

Product version:
3.2.3.4

Copyright:
Digital River, Inc.

Original file name:
host.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\2f925a9155154d319f64e2bf3569c93c_pod14_he-il.exe

Digital Signature
Signed by:
Digital River, Inc.

Authority:
VeriSign, Inc.

Valid from:
11/5/2012 2:00:00 AM

Valid to:
12/6/2015 1:59:59 AM

Subject:
CN="Digital River, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Digital River, Inc.", L=Minnetonka, S=Minnesota, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
58D8D0310D9571EA8F11D0E3E4FE0C87

File PE Metadata
Compilation timestamp:
5/25/2012 9:30:56 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:RTRM4nA3NvTv6Ut9LRSB1qTFySJZthdcIiWDPEK/0dcemCdZ5LZO95RF+Gc67:bMvN7LaEkOpi6PDcZmCZLZO9T5f7

Entry address:
0x3FA49

Entry point:
E8, E2, 24, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 38, 8A, 46, 00, 89, 0D, 34, 8A, 46, 00, 89, 15, 30, 8A, 46, 00, 89, 1D, 2C, 8A, 46, 00, 89, 35, 28, 8A, 46, 00, 89, 3D, 24, 8A, 46, 00, 66, 8C, 15, 50, 8A, 46, 00, 66, 8C, 0D, 44, 8A, 46, 00, 66, 8C, 1D, 20, 8A, 46, 00, 66, 8C, 05, 1C, 8A, 46, 00, 66, 8C, 25, 18, 8A, 46, 00, 66, 8C, 2D, 14, 8A, 46, 00, 9C, 8F, 05, 48, 8A, 46, 00, 8B, 45, 00, A3, 3C, 8A, 46, 00, 8B, 45, 04, A3, 40, 8A, 46, 00, 8D, 45, 08, A3, 4C, 8A, 46...
 
[+]

Entropy:
7.8918  (probably packed)

Code size:
333.5 KB (341,504 bytes)

The file 2f925a9155154d319f64e2bf3569c93c_pod14_he-il.exe has been seen being distributed by the following 50 URLs.

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?local_only=true&receipt_id=575228489&culture=pt-br

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=1845929916&local_only=true&receipt_id=574561011&culture=pl-pl

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-882885395&local_only=true&receipt_id=574504242&culture=en-us

https://www1.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-1247194243&local_only=true&receipt_id=610878708&culture=en-us

https://www20.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=786897773&local_only=true&receipt_id=110689059&culture=en-us

https://www1.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-131647865&local_only=true&receipt_id=212203460&culture=en-us

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=1545708263&local_only=true&receipt_id=546295768&culture=it-it

https://www20.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-1869108714&local_only=true&receipt_id=752777823&culture=en-us

http://softwis.com/assets/.../a23f745aaa564f5299d0df64897e4214_Pod12_en-GB.exe

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=1679761621&local_only=true&receipt_id=574547923&culture=he-il

https://www2.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-1793512923&local_only=true&receipt_id=808499286&culture=en-us

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-233668521&local_only=true&receipt_id=546571362&culture=zh-tw

https://www1.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=1202668205&local_only=true&receipt_id=708104615&culture=en-us

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-1705747195&local_only=true&receipt_id=545623133&culture=en-us

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=1050773270&unit_id=446716856&receipt_id=446025988&culture=en-us

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=1575170976&local_only=true&receipt_id=574681314&culture=de-de

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-1242885169&local_only=true&receipt_id=446284515&culture=en-GB

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-2132575717&local_only=true&receipt_id=574556232&culture=en-GB

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-1780366014&local_only=true&receipt_id=574943665&culture=en-us

https://www1.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-131647865&local_only=true&receipt_id=708100126&culture=en-us

https://www2.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=1328297734&local_only=true&receipt_id=808605822&culture=en-us

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-1780366014&local_only=true&receipt_id=546352833&culture=en-us

https://www2.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=1539209231&local_only=true&receipt_id=808636853&culture=en-us

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-220219202&local_only=true&receipt_id=446623085&culture=es-ES

https://www20.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=1608036765&local_only=true&receipt_id=752793532&culture=en-us

https://www20.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=362907706&local_only=true&receipt_id=110621991&culture=en-us

https://www20.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-193857216&local_only=true&receipt_id=752806373&culture=en-us

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=-850027353&local_only=true&receipt_id=546487090&culture=en-ca

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?cache=1238161599&local_only=true&receipt_id=574390271&culture=pt-PT

https://www7.buyoffice.microsoft.com/.../dlmdownloader.aspx?local_only=true&receipt_id=546680096&culture=pt-br

Latest 30 of 64 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.